20f6feb4f8811d4976ad40c1bc3ff337d9904a81a1c534669e541cbace90d468

General

Target

20f6feb4f8811d4976ad40c1bc3ff337d9904a81a1c534669e541cbace90d468
Size

323KB
MD5

76ce56b76044623f5be69d70770d0670
SHA1

795d1e40d93d70cc0384eb840d7ccbe339a66d27
SHA256

20f6feb4f8811d4976ad40c1bc3ff337d9904a81a1c534669e541cbace90d468
SHA512

46f181af8e12a8df7591d0ece693a558dfae45389209e3b254354da305fc2d7ce50fc01f19b555ae4cd56982d5a9f46d77bbe718eba4f08df347a7984cd7b9ae
SSDEEP

6144:ZCRJW4QEz8k2m2eXfOGVNhvI33sDHCjtzUKy+hVSn9cV7D+EPNQBpjA4BeY7wKhf:w3Qc2eXGGvhlAtzXy39HE1qDBeYpvXbL

Score

N/A

Malware Config

Signatures

Files

20f6feb4f8811d4976ad40c1bc3ff337d9904a81a1c534669e541cbace90d468
.exe windows x86

68fadc2e218e0d29f7a1862d901198b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
CloseHandle
FindAtomA
GetCPInfo
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SearchPathA
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

BuildSecurityDescriptorA
GetPrivateObjectSecurity
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RevertToSelf
SetTokenInformation

user32

AppendMenuA
BeginPaint
BlockInput
ClientToScreen
ClipCursor
EndDialog
EqualRect
GetMenu
InvalidateRect
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
ShowCaret
SwitchDesktop
UpdateWindow

Sections

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack
Size: 512B - Virtual size: 255B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68fadc2e218e0d29f7a1862d901198b8

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data Size: 61KB - Virtual size: 61KB

.code Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.pack Size: 512B - Virtual size: 255B

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 61KB - Virtual size: 61KB

.code
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.pack
Size: 512B - Virtual size: 255B

.rsrc
Size: 1KB - Virtual size: 1KB